47258 matches found
OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
Summary An authorization mismatch in the gateway let an authenticated caller with only operator.write use browser.request to reach browser profile management routes that persist configuration to disk. In practice, this exposed an admin-only configuration write primitive through /profiles/create...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request. An attacker can modify or create browser profiles and persist unauthorized configuration changes by sending crafted requests to profile...
Minor update(8) for Vivaldi Android Browser 7.8
Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the seventh 7.8 minor update: Upgraded to...
Minor update (8) for Vivaldi Desktop Browser 7.8
Download Vivaldi The following improvements were made since the seventh 7.8 minor update: Chromium Update to 144.0.7559.246 ESR includes security fixes for CVE-2026-3909 & CVE-2026-3910 from 146.0.7680.80 Main photo byDominik Van Opdenbosch...
CVE-2026-3942
An incorrect security ui flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=475238879...
CVE-2026-3941
An insufficient policy enforcement flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=474670215...
CVE-2026-3939
An insufficient policy enforcement flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=40058077...
CVE-2026-3938
An insufficient policy enforcement flaw was found in the Clipboard component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=474763968...
CVE-2026-3934
An insufficient policy enforcement flaw was found in the ChromeDriver component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=478783560...
CVE-2026-3931
A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=417599694...
CVE-2026-3929
A side-channel information leakage flaw was found in the ResourceTiming component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=477180001...
CVE-2026-3930
An unsafe navigation flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=476898368...
CVE-2026-3927
An incorrect security ui flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=474948986...
CVE-2026-3926
An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=478659010...
CVE-2026-3924
An use after free flaw was found in the WindowDialog component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=487338366...
CVE-2026-3922
An use after free flaw was found in the MediaStream component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=485397139...
CVE-2026-3920
An out of bounds memory access flaw was found in the WebML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=482875307...
CVE-2026-3918
An use after free flaw was found in the WebMCP component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=483853103...